Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          KqVsjSCcOJnfPRjDIB3f+gl5SDox1UtyccBR9Sw1ovo=
Subject key identifier:   44:03:4A:2C:1F:64:73:1C:21:83:35:0E:A0:69:8C:6A:F7:B3:2B:6B
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0407
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          03DC
Signing time:             Mon 20 Oct 2025 03:31:53 +0000
Manifest this update:     Mon 20 Oct 2025 03:31:53 +0000
Manifest next update:     Wed 22 Oct 2025 03:31:53 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: HoFZLx4+HFM+ZxjTV9U6Yidn8COf+ounhV6XcCCEob4=)
                          2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
                          10: 409CF10850E111F0986264E2DAE4EC9C.roa (hash: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=)
                          11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Oct 20 03:31:53 2025 GMT
            Not After : Oct 22 03:31:53 2025 GMT
        Subject: CN=68f5ad29-f0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:eb:c4:c1:bf:7a:42:4c:fb:a1:0b:34:90:
                    5f:3e:91:ff:23:d8:02:92:9d:9a:dd:c9:c9:39:01:
                    f1:ac:44:51:28:34:01:25:46:96:a0:4a:76:2f:fe:
                    43:65:e9:66:a2:cd:bf:5f:1a:25:9d:7f:80:80:f9:
                    d0:b6:54:c5:4e:21:b6:b3:57:d6:40:89:ad:b3:21:
                    b5:cb:5a:5a:ef:4f:c6:f0:3e:14:e8:c5:80:61:92:
                    7a:03:1e:7f:a4:0d:f4:d0:97:82:8b:35:c4:a3:67:
                    d3:5c:fe:46:aa:66:bd:f6:8c:1f:d1:26:5d:f6:b9:
                    df:c6:0d:a2:fa:d0:d4:7d:9d:42:7e:53:25:fe:e1:
                    e8:c8:66:f8:1c:02:7a:59:19:5d:5b:19:1d:9d:bd:
                    01:74:69:4b:3f:f6:77:79:85:8d:01:10:c3:17:9c:
                    94:86:6f:ea:10:7d:81:7a:b4:99:3b:62:42:ae:ad:
                    c9:7a:f0:06:0d:46:22:e2:03:f7:24:e1:4c:b7:70:
                    db:d7:8e:eb:ec:72:3c:a3:f4:24:6b:f0:5d:46:35:
                    ce:c3:f6:9a:18:3a:c4:d4:68:0c:6b:49:ef:37:25:
                    67:27:91:28:69:65:f9:74:5b:a8:dd:83:16:9e:20:
                    ad:97:f0:20:7c:47:47:87:da:24:32:97:98:fb:48:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:4A:2C:1F:64:73:1C:21:83:35:0E:A0:69:8C:6A:F7:B3:2B:6B
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:7a:20:2e:2d:e9:9d:d8:b8:61:a5:61:0d:26:e8:ef:b6:
         81:6d:1c:5d:7a:51:ae:a8:4b:15:1f:6e:14:b1:58:ea:8f:d0:
         10:12:fc:af:79:72:db:3f:52:8d:7e:6c:81:29:47:3b:63:07:
         ca:c6:3e:fc:9b:94:3c:1b:f6:24:79:19:7f:1d:b0:83:eb:7e:
         c9:6e:4a:8e:44:b3:5f:3c:79:d7:42:5c:00:d3:f1:d8:09:4f:
         61:f8:92:23:49:fb:56:89:1c:0a:34:f0:1e:34:6f:d0:bc:a1:
         fd:fc:1d:e8:e9:48:30:3d:cd:9d:34:6a:06:0d:0e:fb:3b:c7:
         34:14:13:78:35:6b:f1:d2:6c:f4:c4:bf:44:41:0f:35:5d:10:
         c7:4b:27:af:94:fb:fd:09:7c:ab:78:08:d3:c3:e8:d8:42:a7:
         5c:6f:94:64:c4:93:60:56:30:d2:33:29:54:e5:a2:b3:c7:b2:
         7c:97:34:54:94:68:56:03:76:80:f7:be:b6:4a:b6:9d:02:e4:
         70:cf:17:91:54:67:b5:28:3c:11:46:15:62:8e:d9:37:05:82:
         44:dd:8b:0a:57:cc:5b:7f:03:1a:2c:f6:fe:e1:65:08:ee:f7:
         cd:93:d0:f9:af:bd:6c:1c:d5:91:f2:6c:7b:49:2d:82:9d:be:
         01:51:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:59 2025 by rpki-client